Corrective Action
Market-Surveillance Corrective Action Response
What this control does
Cooperate with market-surveillance evaluations and implement corrective actions across affected AI systems when ordered.
How to implement
When a market-surveillance authority evaluates an AI system or requires corrective action, identify the affected operator, systems and legal basis. Cooperate with the evaluation and assign actions for the required correction, restriction, withdrawal or recall. Track the authority's deadline and extend action to the affected systems within the required scope. Address overturned classifications and specified formal non-compliance through the relevant route. Retain evidence and report back as required; do not close the matter merely because an action plan has been created.
Suggested timing and triggers
On an authority evaluation or finding; within prescribed deadlines; follow-up until the required action is completed.
Evidence examples
Authority request or finding and affected-system inventory Corrective-action plan, owners and deadlines Implementation and verification records Classification or formal-compliance corrections Authority submissions and closure correspondence
How to check this control
Trace an authority finding through the completed action and verification. Reconcile the affected-system inventory with the scope of the required action, and check whether deadlines and report-back requirements were met.
Related EU AI Act obligations
Article 79(2), 79(4)
Cooperate With Market-Surveillance Risk Evaluations and Implement Required Corrective Action
Article 80(2), 80(4)-(5)
Bring an Annex III System Into High-Risk Compliance When a Non-High-Risk Classification Is Overturned
Article 82(1)-(2)
Take Authority-Directed Corrective Action When a Compliant High-Risk AI System Still Presents a Risk
Article 83(1)
Remedy Specified Formal High-Risk AI Non-Compliance Within the Authority's Deadline